Job ID: JOB_ID_2510
Role Overview
The Cybersecurity Compliance Analyst position is a critical, high-impact role supporting a major infrastructure redesign for the Connecticut Judicial Branch. This hybrid position, based in Hartford, CT, requires a unique blend of deep technical networking expertise and rigorous regulatory compliance knowledge. Unlike traditional Governance, Risk, and Compliance (GRC) roles that focus solely on high-level policy writing, this position is deeply technical, hands-on, and advisory. The successful candidate will work directly with engineering and architecture teams to validate secure configurations and ensure that the technical architecture meets the stringent standards required for government systems. This is a 6-month contract with potential for extension, focusing on the integrity of critical judicial infrastructure.
Key Responsibilities
- Validate Cisco network configurations to ensure they align with established security postures and organizational mandates. This involves reviewing router and switch settings to confirm that security protocols are correctly implemented.
- Conduct comprehensive reviews and assessments of Palo Alto firewall designs and their subsequent implementations. You will be responsible for verifying that rule sets and security policies are optimized for both protection and performance.
- Ensure all systems and network components remain in strict compliance with Criminal Justice Information Services (CJIS) security policies, NIST frameworks, and IRS Publication 1075 requirements.
- Develop and manage detailed Plans of Action and Milestones (POA&Ms) to address identified security gaps and audit findings, tracking remediation efforts from inception to completion.
- Create and maintain technical hardening guides and DISA STIG (Security Technical Implementation Guide) documentation for enterprise systems, ensuring a standardized and secure baseline across the environment.
- Provide high-level technical compliance recommendations in a read-only advisory capacity to engineering and architecture teams, acting as a subject matter expert on security best practices.
- Support ongoing audit readiness by aligning internal controls with external regulatory frameworks and preparing documentation for third-party assessors.
- Translate complex compliance requirements into actionable technical security controls for the implementation teams, bridging the gap between legal mandates and technical execution.
- Collaborate closely with cross-functional teams, including cybersecurity, network engineering, and systems architecture to foster a culture of security-by-design.
Technical Requirements and Qualifications
- Minimum of 8 years of hands-on experience specifically within Cisco networking environments, demonstrating a deep understanding of routing, switching, and network security.
- Proven expertise in Palo Alto firewall management, including experience with Palo Alto Panorama for centralized management and policy orchestration.
- Deep understanding of network segmentation strategies and their application in a secure government environment to isolate sensitive data.
- Extensive experience supporting NIST and CJIS audits within a public sector or highly regulated industry, with a track record of successful audit outcomes.
- Demonstrated ability to create baselines, hardening scripts, and STIG-compliant configurations for a variety of network devices.
- Familiarity with IRS Publication 1075, SOX audits, and CIS Benchmarks is highly preferred, as these frameworks often overlap in complex government environments.
- A technical background is mandatory; candidates with only policy or GRC experience will not be considered for this specific technical validation role.
Work Environment and Expectations
This role is situated within the public sector, specifically supporting the Connecticut Judicial Branch through Red River. The environment is a mid-sized enterprise, making it ideal for professionals who enjoy having a direct impact on the security posture of critical government infrastructure. Candidates coming from massive global consulting firms may find the hands-on, localized nature of this role different from their previous experiences, as it requires a high degree of individual accountability and technical depth. The position is hybrid, requiring presence at the Hartford, CT office located at 231 Capitol Avenue. This allows for a balance of remote focus and in-person collaboration with the engineering teams. The duration is initially set for 6 months, but given the scope of the infrastructure redesign, there is significant work to be done.
Education and Certification
- A Bachelor’s degree in Cybersecurity, Computer Science, Network Engineering, or a related technical field is preferred.
- Relevant certifications such as CCNP (Cisco Certified Network Professional), PCNSE (Palo Alto Networks Certified Network Security Engineer), CISA (Certified Information Systems Auditor), or CISSP (Certified Information Systems Security Professional) are considered a significant advantage.
- Must be a US Citizen (USC Only) due to the sensitive nature of the data and government compliance requirements.
Special Requirements
Visa: USC Only. Domain: Government/Judicial Branch (Connecticut Judicial Branch). Interview: Not specified. Mode: Hybrid (231 Capitol Avenue, Hartford, CT).
Compensation & Location
Salary: $145,000 – $195,000 per year (Estimated)
Location: Hartford, CT
Recruiter / Company – Contact Information
Recruiter / Employer: Red River
Email: amitvikalg@gmail.com
Recruiter Notice:
To remove this job posting, please send an email from
amitvikalg@gmail.com with the subject:
DELETE_JOB_ID_2510